libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-adminUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-login-shellUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-lxc | Apr 27, 2020 | Mar 28, 2018 |
| Centos_linux | — | Upgrade libvirt-daemon-lxcUpgrade libvirt-adminUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-lock-sanlockUpgrade libvirt-docsUpgrade libvirt-pythonUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-login-shell | Jun 1, 2018 | Mar 14, 2018 |
| Debian | — | Upgrade libvirt | Mar 17, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemonUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemu | Dec 4, 2019 | Mar 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedev | Jul 3, 2018 | Mar 28, 2018 |
| Oracle_linux | — | Upgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-lxcUpgrade libvirtUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docsUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-admin | May 15, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-login-shellUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirt-pythonUpgrade libvirt-clientUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-nssUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interface | May 15, 2018 | Mar 14, 2018 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-devel-32bitUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storageUpgrade virt-manager-commonUpgrade libvirt-client-32bitUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade virt-managerUpgrade libvirtUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-installUpgrade libvirt-nssUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-qemu | Mar 30, 2018 | Mar 14, 2018 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Jun 16, 2018 | Mar 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub